CVE-2023-44286 Information

Description

Dell PowerProtect DD versions prior to 7.13.0.10 LTS 7.7.5.25 LTS 7.10.1.15 6.2.1.110 contain a DOM-based Cross-Site Scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to the injection of malicious HTML or JavaScript code to a victim user’s DOM environment in the browser. . Exploitation may lead to information disclosure session theft or client-side request forgery.

Reference

https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities